# CVE-2026-75779: ASUS router OS command injection and CSRF in administrator interface

Source: https://junglewise.ai/threats/cve-2026-75779-improper-neutralization-of-special-elements-used-in-an-os-command  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-23. Updated: 2026-10-23  
License: CC BY 4.0 with a link back

CVE-2026-75779 · Severity: info · Published 2026-10-23

An ASUS router contains vulnerabilities that allow an attacker to trick a logged-in administrator into visiting a malicious website, which can then execute arbitrary commands with root privileges on the router. This could allow an attacker to take complete control of the router and access all network traffic, modify settings, or use it as a pivot point for further attacks.

Technologies: [ASUS Router](https://junglewise.ai/threats/technologies/asus-router). Vendors: [ASUS](https://junglewise.ai/threats/vendors/asus).

## Quick answers

**Is CVE-2026-75779 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-75779 being exploited in the wild.

**How severe is CVE-2026-75779?** Informational severity, published 23 October 2026.

**Which products and versions are affected?** ASUS router.

**Is there a fix for CVE-2026-75779?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-75779 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2026-75779?** Check whether you run ASUS Router. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The vulnerability combines OS command injection with cross-site request forgery (CSRF) in the router's administrative interface. An authenticated administrator can be socially engineered to visit a phishing site that submits crafted requests to the router, injecting OS commands that execute with root privileges. The attack requires the administrator to be logged into the router and to click a malicious link.

## Affected products

- ASUS router

## Timeline

- 2026-10-23: disclosed

## References

- [https://www.asus.com/security-advisory](https://www.asus.com/security-advisory)

## Related threats

- [ASUS router command injection in factory-default state](https://junglewise.ai/threats/cve-2026-75775-improper-neutralization-of-special-elements-used-in-an-os-command)
- [ASUS router missing authentication for critical function](https://junglewise.ai/threats/cve-2026-75753-missing-authentication-for-a-critical-function-in-certain-asus)
- [ASUS router sensitive information insertion into log file](https://junglewise.ai/threats/cve-2026-16528-insertion-of-sensitive-information-into-log-file-in-certain-asus)
- [ASUS Router format string in web management interface](https://junglewise.ai/threats/cve-2026-14157-use-of-an-externally-controlled-format-string-in-the-asus-router)